Am 07.10.26 um 01:31 schrieb Christopher Schultz:
The proposed Apache Tomcat 10.1.61 release is now available for
voting.

All committers and PMC members are kindly requested to provide a vote if possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding. We welcome non-committer votes or comments on release builds.

The notable changes compared to 10.1.60 are:

- Fix possible corruption when using HTTP/2 and async IO on uploads.
   Submitted by Tim Burke.

- Fix possible corruption of HTTP/1.1 chunked response bodies if a
   previous write to a chunked body fails.

- Fix TLS handshake issues with MLDSA caused by large signatures.
   Patch submitted by Lukas Hellebrandt.

For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.61/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1610

The tag is:
https://github.com/apache/tomcat/tree/10.1.61
https://github.com/apache/tomcat/commit/ ed89280ad31d8dfcac3a3b498d759f6f8b5eb097

Please reply with a +1 for release or +0/-0/-1 with an explanation.
+1 to release.

Reproducibility of the build checked (including the Windows installer) using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.

Original Windows installer signature verified with osslsigncode 2.10.

Unit tests ran on platforms

- RHEL 7, 8, 9 and 10 and SLES 12 and 15

using

- recent patch versions of JDK 11, JDK 17, 21, 25, 27 and 28 (EA)

from

- Eclipse Adoptium, Azul Zulu, Amazon Corretto, Oracle, RedHat (missing 27) and from OpenJDK for 28

Also tested with

- tcnative 2.0.16 and panama

based on

- OpenSSL 3.5.9, 3.6.5, 4.0.3 and 4.1.0beta1 (the last two only for tcnative 2 and panama)

Each combination of platform, JVM and JSSE or tcnative or panama only tested for NIO or NIO2 (randomized). Total number of test combinations:

     64 nio2 jsse
    123 nio2 panama
    301 nio2 tcnative
     78 nio jsse
    109 nio panama
    267 nio tcnative

Test observations:

  - IMHO nothing critical

- one test in org.apache.catalina.session.TestPersistentManagerDataSourceStore using derby was missing the assume for the needed Java version, so it fails for Java 11. Fixed yesterday.

- TestPQC with MLDSA fails for JDK28 with tcnative (see separate mail in TC 11 vote thread)

- TestStandardVirtualThreadExecutor fails to missing support below Java 21 (already fixed in HEAD, thanks)

  - in addition
    - one crash failure with JSSE (1 in 142 runs)
    - very few crashes with tcnative (6 in 568 runs)
    - no crash failures with panama (232 runs)
    - very few non-crash failures with jsse (6 in 142 runs)
    - no non-crash failures with tcnative (568 runs)
    - very few non-crash failures with panama (2 in 232 runs)

Thanks for RM!

Best regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to